Ingestion API

POST observation batches

Submit one validated observation batch.

The ingestion service validates a bounded batch, resolves token-bound tenant and environment scope, replaces public routing keys with internal identifiers, and persists accepted envelopes.

Authentication

Send the secret ingest token as a bearer credential.

Use Authorization: Bearer <secret-ingest-token> from a backend process. The credential is write-only and cannot read workspace or observation data.

Errors

Handle authentication, validation, and capacity responses.

• Unauthorized credentials are not retryable until corrected.
• Invalid envelopes must be fixed before resubmission.
• Rate limits require bounded backoff.
• Temporary service failures may be retried by the collector queue.